Error: rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.mft
File:                     eXtZOVh00u5uyMv9B2sqvGE9ibQ.mft (raw, json)
Hash identifier:          VsvgEDx9jccCRjJJM6D4qFhkNpGNyM6zUWmHRBq0c+M=
Subject key identifier:   5F:F7:D7:0B:1B:7E:C0:4E:77:0F:0A:27:77:82:F3:FA:99:7F:C2:C0
Authority key identifier: 79:7B:59:39:58:74:D2:EE:6E:C8:CB:FD:07:6B:2A:BC:61:3D:89:B4
Certificate issuer:       /CN=F3651B12AF/serialNumber=797B59395874D2EE6EC8CBFD076B2ABC613D89B4
Certificate serial:       01E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eXtZOVh00u5uyMv9B2sqvGE9ibQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.mft
Manifest number:          01DD
Signing time:             Sun 11 Oct 2026 05:00:49 +0000
Manifest this update:     Sun 11 Oct 2026 05:00:48 +0000
Manifest next update:     Tue 13 Oct 2026 05:00:48 +0000
Files and hashes:         1: eXtZOVh00u5uyMv9B2sqvGE9ibQ.crl (hash: O78zWaw5u3Uzki9VwU2SbCPkhH1V7FKGz2Q7BhNeKx8=)
                          2: 65089C20C45B11F0AED8CBD5DAE4EC9C.roa (hash: 3Fe7kc9SOxNJ9M4sM498Rlt07NmCt/hudWiyOHdD0vc=)
                          3: D3F2D11CBB1611F0A3C453CBDAE4EC9C.roa (hash: vd3EaqmnyNA8r/AoagUYUr3pDX7tYTNbu76v8SspQ0c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eXtZOVh00u5uyMv9B2sqvGE9ibQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651B12AF, serialNumber=797B59395874D2EE6EC8CBFD076B2ABC613D89B4
        Validity
            Not Before: Oct 11 05:00:48 2026 GMT
            Not After : Oct 13 05:00:48 2026 GMT
        Subject: CN=6acb1800-c866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:f6:bd:7c:76:20:4d:47:2d:73:df:da:5e:
                    db:5e:20:a8:98:73:e3:64:60:fc:23:94:12:1e:a8:
                    5c:66:32:5c:5e:bd:d1:4a:c4:22:50:f7:08:ec:5e:
                    14:37:9c:66:84:47:5d:9c:93:79:86:81:3a:4d:3e:
                    22:b3:46:78:1b:73:25:8b:13:77:ab:5a:02:d4:b0:
                    3e:74:21:3b:71:4e:69:73:98:5f:b6:f9:28:53:c4:
                    2f:a0:d1:5f:63:90:68:eb:1e:2c:b5:c9:e5:dd:73:
                    d0:cb:2c:23:7c:12:c1:9e:5f:ff:aa:4e:b3:b3:89:
                    35:dd:c3:c9:8d:d0:c5:46:4e:a3:f9:04:2b:35:3c:
                    05:b5:bc:75:01:b3:41:3d:e1:5f:77:b2:ee:3a:6c:
                    d2:54:ff:f9:d6:f2:89:9a:a3:e2:91:80:2c:67:3d:
                    37:02:e9:a4:48:5b:b7:58:d4:9b:92:96:e4:94:cb:
                    56:59:ed:fc:8a:63:69:43:09:45:61:80:61:fd:48:
                    47:6c:93:9c:87:d6:9e:49:b4:58:55:e4:e0:93:b2:
                    42:bd:d2:2f:89:43:1e:22:cd:b0:19:89:dc:57:fb:
                    3a:b1:83:5f:3b:81:60:e3:ed:04:29:71:45:d9:86:
                    c9:31:b1:85:5e:ea:78:11:9f:48:57:ea:29:50:be:
                    92:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F7:D7:0B:1B:7E:C0:4E:77:0F:0A:27:77:82:F3:FA:99:7F:C2:C0
            X509v3 Authority Key Identifier:
                keyid:79:7B:59:39:58:74:D2:EE:6E:C8:CB:FD:07:6B:2A:BC:61:3D:89:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eXtZOVh00u5uyMv9B2sqvGE9ibQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6d:93:58:1a:06:7d:42:bb:47:5c:81:d0:3b:ee:33:9a:1b:
         7c:4f:e5:6b:cc:fd:a3:79:a5:e9:0d:a1:42:97:60:49:6c:cd:
         83:21:e3:c6:09:36:a0:3f:65:80:9c:21:7c:48:bf:5a:a7:f2:
         48:c5:dc:e1:c3:48:88:ca:29:b2:23:bc:e7:3b:87:e0:47:d1:
         60:e1:2c:67:42:e8:c0:c8:ff:77:71:c8:f4:8a:1e:43:89:55:
         26:d1:19:88:50:74:df:32:a1:68:b4:94:1c:02:2d:36:28:96:
         4b:32:bb:fe:04:1d:7f:d8:50:36:6d:c7:a9:2e:e9:0b:57:fc:
         a4:d1:d1:d1:5e:fd:a0:87:79:7c:b1:f8:b1:c8:74:25:27:44:
         d9:98:ad:94:6f:b4:74:bd:c1:43:c5:64:67:9b:b6:63:31:58:
         06:10:71:b6:70:82:eb:2a:f7:98:06:6f:af:b8:ca:9e:b6:00:
         7e:1a:e4:78:71:cd:87:b4:b0:2d:2d:d6:36:63:cb:8c:86:8f:
         3b:fd:7d:22:d7:da:25:50:d2:8e:00:ee:54:25:df:0f:89:80:
         22:fd:2b:84:cf:a5:bc:94:71:02:cf:26:2f:fe:3c:43:28:49:
         8b:95:72:5c:d3:de:b5:a2:05:8e:71:5d:4b:c0:22:85:c9:56:
         3b:06:40:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:00:30 2026 by rpki-client